Draft, not yet reviewed. This document still contains unfilled placeholders and has not been reviewed by a lawyer. Do not rely on it, and do not accept paying customers against it.
Sub-processors
Last updated 6 October 2026
These are the third parties BugShot uses to deliver the service. Each is bound by data protection terms equivalent to those in our Data Processing Agreement, and we remain responsible for their performance.
| Sub-processor | Purpose | Data reaching them | Location |
|---|---|---|---|
| Cloudflare, Inc. | Application hosting, database, object storage, network protection | All report data, including screenshots, and all account data | United States |
| Stripe, Inc. | Payment processing and subscription billing | Account holder email and billing details. No report data. | United States |
| Resend, Inc. | Transactional email, meaning sign in links and service notices | Account holder email address only. No report data. | United States |
No sub-processor receives report data except Cloudflare. Payment and email providers see account holder contact details only.
Changes
We give account holders at least 30 days notice by email before adding or replacing a sub-processor. If you object on reasonable data protection grounds and we cannot resolve it, you may terminate without penalty and receive a pro rata refund.
What is not on this list
We use no analytics, advertising, session recording or customer messaging tools in the dashboard or the widget. If that changes, this page changes first.
Questions: [CONTACT EMAIL]